UDP Packet - Datagram Structure, Header Fields, and Payload
A UDP packet is often called a UDP datagram. It has a fixed 8-byte header followed by payload data, making it small and fast compared with TCP.
Key Takeaways
UDP header size is fixed at 8 bytes.
Length includes both UDP header and payload.
Checksum provides integrity checking but not retransmission.
UDP preserves datagram boundaries at the transport layer.
UDP packet format
The UDP header contains source port, destination port, length, and checksum. After those 8 bytes, the remaining bytes are payload for an application protocol such as DNS, DHCP, or custom telemetry.
Why UDP is fast
UDP avoids connection setup, sequence tracking, acknowledgment, flow control, and retransmission logic. That makes the header smaller and the behavior simpler, but applications must handle loss or ordering if they care about it.
Common UDP analysis checks
Verify that the UDP length matches the actual datagram size, identify the application from ports and payload, and check whether checksum behavior differs between IPv4 and IPv6.
Practical Reference
| Item | Value | Analysis Note |
|---|---|---|
| Header size | 8 bytes | Always fixed. |
| Length field | Header + payload | Minimum value is 8. |
| Checksum | Integrity check | Mandatory in IPv6. |
| Payload | Application bytes | Often DNS, DHCP, NTP, or media. |
FAQ
Is a UDP packet the same as a UDP datagram?
In most discussions, yes. Datagram is the precise term for the UDP transport unit.
Does UDP guarantee delivery?
No. UDP sends datagrams without built-in acknowledgments or retransmission.